Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
File: AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft (raw, json)
Hash identifier: Y/TKbVQgipkp6ZWvmVflC5mQScoZVPJ1EM8EqQKKzrg=
Subject key identifier: 2C:02:ED:04:8E:F2:15:18:B7:22:3E:10:8F:A7:AF:82:6B:8B:62:20
Authority key identifier: 01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
Certificate issuer: /CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
Certificate serial: 0198D660EB89472BF77EECDA616D8222ED2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
Manifest number: 0CE3
Signing time: Sat 23 Aug 2025 10:02:12 +0000
Manifest this update: Sat 23 Aug 2025 10:02:12 +0000
Manifest next update: Sun 24 Aug 2025 10:02:12 +0000
Files and hashes: 1: AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl (hash: upbgIkIQ6UVap02DzQItlCGAngWHr7S5MYocdYzFYug=)
2: xp3MLkw6oQ1O74Xmt4QPNYMRgUo.roa (hash: /pg5KPvZDcy/WFS+OnIBTt8dSXtHgvFhtv8p2k/BYPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:eb:89:47:2b:f7:7e:ec:da:61:6d:82:22:ed:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
Validity
Not Before: Aug 23 10:02:12 2025 GMT
Not After : Aug 24 10:02:12 2025 GMT
Subject: CN=2c02ed048ef21518b7223e108fa7af826b8b6220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:43:62:28:4e:99:6c:82:79:5f:29:8d:c4:
ff:57:5e:94:6d:a6:81:42:b9:2a:93:06:27:44:d5:
41:ca:c4:71:e0:5a:9b:8b:e7:56:2f:7c:30:c1:c4:
d3:da:8d:58:57:a5:4e:c8:58:74:87:f7:1b:4d:d1:
84:c1:e6:18:b4:3d:5c:07:05:0e:c5:a0:fa:f0:35:
df:c1:57:1b:9b:2a:1d:ae:cc:65:9f:13:89:60:a8:
a8:46:80:9c:28:fb:8e:c1:b4:f5:77:4f:6c:f0:9f:
82:c3:74:48:bc:6a:38:a2:ce:95:47:6f:a4:0b:eb:
ff:46:01:fb:35:93:4f:06:2a:6d:6d:b8:2a:e4:81:
dc:ee:69:63:3c:0d:e5:0a:34:61:43:d8:42:3a:f1:
3b:1c:42:70:ca:77:a5:38:7f:76:38:95:1f:95:49:
c3:2f:6c:92:d0:cc:e3:83:00:ff:5e:fb:e2:6c:12:
14:d4:1d:8b:39:af:81:e8:99:b8:eb:63:be:5e:9d:
d0:4f:8c:89:15:19:ce:e2:86:e7:26:8b:13:36:1c:
e2:9e:37:0c:f4:3d:5d:83:f8:80:b2:31:4f:47:31:
bd:b8:c8:3c:51:92:be:69:ac:2b:49:d2:5a:01:b1:
f5:f5:b3:bd:9f:82:aa:78:2c:03:a4:d0:53:c1:45:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:02:ED:04:8E:F2:15:18:B7:22:3E:10:8F:A7:AF:82:6B:8B:62:20
X509v3 Authority Key Identifier:
keyid:01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9c:91:44:12:2b:bc:0d:46:a3:fb:78:ba:c9:9c:ea:f9:c0:
9f:54:1a:66:a8:87:3b:95:b8:15:c1:5e:d9:f0:21:4a:ac:11:
bb:b6:08:41:8c:33:67:3f:24:07:15:76:23:2e:56:f6:5c:cd:
a9:d4:a1:f6:b3:af:04:44:e0:61:e0:0f:06:a4:42:ed:6d:bc:
08:43:e2:07:6c:1c:20:4a:6c:00:5e:93:f7:cc:ae:51:09:28:
86:bb:87:ea:7a:d0:05:12:d3:cb:f7:9d:42:16:11:ee:eb:99:
09:1b:7b:81:1f:22:d7:0e:a5:fd:c5:fc:37:5c:2f:9b:87:5e:
e3:2a:2c:bc:3c:ea:01:b2:b8:06:d8:04:b1:fd:77:0a:3b:91:
3e:13:20:9e:d6:cd:9d:8b:14:86:54:e9:79:eb:2d:54:17:34:
63:19:a4:33:a3:d3:ec:7c:ce:18:5f:d7:7b:17:d3:f4:52:4b:
68:19:60:bb:5c:05:37:bd:f4:9c:0e:81:63:02:a6:73:cb:6d:
f0:31:6c:10:86:f2:8c:1b:d5:30:ce:d0:19:8e:ef:f2:59:3a:
84:d8:2a:49:2c:7b:db:23:ea:16:e7:ff:df:68:b0:ab:d5:42:
1c:d8:9f:a7:d0:44:92:75:ab:d3:0b:f8:8c:3a:b9:e2:97:10:
8e:90:3d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:22 2025 by rpki-client